policy/frameworks/storage/backend/sqlite/main.zeek

Storage::Backend::SQLite

SQLite storage backend support

Namespace:

Storage::Backend::SQLite

Imports:

base/frameworks/storage/main.zeek

Summary

Types

Storage::Backend::SQLite::Options: record

Options record for the built-in SQLite backend.

Redefinitions

Storage::BackendOptions: record

New Fields:

Storage::BackendOptions

sqlite: Storage::Backend::SQLite::Options &optional

Detailed Interface

Types

Storage::Backend::SQLite::Options
Type:

record

database_path: string

Path to the database file on disk. Setting this to “:memory:” will tell SQLite to use an in-memory database. Relative paths will be opened relative to the directory where Zeek was started from. Zeek will not create intermediate directories if they do not already exist. See https://www.sqlite.org/c3ref/open.html for more rules on paths that can be passed here.

table_name: string

Name of the table used for storing data. It is possible to use the same database file for two separate tables, as long as the this value is different between the two.

tuning_params: table [string] of string &default = { [synchronous] = normal, [temp_store] = memory, [journal_mode] = WAL } &optional

Key/value table for passing tuning parameters when opening the database. These must be pairs that can be passed to the pragma command in sqlite.

Options record for the built-in SQLite backend.